$ rpki-client -vvvf rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft File: 06083035B4010CEC337EE26F5EA15A04DD209219.mft (raw, json) Hash identifier: ZB/ArRNePeYNJaxp9jWnaoRV/IIBEYRz3ZbIpv9f63M= Subject key identifier: 8E:D6:DD:26:01:86:DC:9B:4F:A6:50:41:02:3F:55:6D:49:CE:59:03 Authority key identifier: 06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19 Certificate issuer: /CN=06083035B4010CEC337EE26F5EA15A04DD209219 Certificate serial: 11249CBEAC0B7FEB1167F4FA40B6D3D70082C612 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft Manifest number: BE Signing time: Mon 21 Sep 2026 21:23:06 +0000 Manifest this update: Mon 21 Sep 2026 21:18:06 +0000 Manifest next update: Tue 22 Sep 2026 23:01:06 +0000 Files and hashes: 1: 323430343a366430303a3a2f33322d3438203d3e203435323934.roa (hash: hu61kA8y8+AVvATIk7KwJvKK9QvDhjlP6nmM1pXjVy4=) 2: 34352e36342e3235322e302f32322d3234203d3e203435323934.roa (hash: ziG1A6Oi8LeUJ0pFcFc03n/VrStN2lfnk92bw36q/aI=) 3: 3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (hash: PCIebsIX9snQ/16KTknT7n3JoWYoLSW34RbZ1h8yq10=) 4: 3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa (hash: ILzJvkloOZdmChaklTC1z8yHQQ79CFcrInsypXVfRQY=) 5: 06083035B4010CEC337EE26F5EA15A04DD209219.crl (hash: uHmdxbQyV4qJo65HrA0uFEFiWGon7IMyMoSi4SOjYuo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:24:9c:be:ac:0b:7f:eb:11:67:f4:fa:40:b6:d3:d7:00:82:c6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06083035B4010CEC337EE26F5EA15A04DD209219 Validity Not Before: Sep 21 21:18:06 2026 GMT Not After : Sep 22 23:01:06 2026 GMT Subject: CN=8ED6DD260186DC9B4FA65041023F556D49CE5903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e7:7c:c0:6b:72:30:0b:4a:2c:6c:d3:0c:45: 04:7a:4e:a2:22:3a:72:dd:f9:40:71:76:e8:53:f3: 75:25:23:0c:24:5c:9f:94:9b:be:4b:16:4f:e1:1e: ed:df:7c:66:b1:85:e0:f2:98:b5:aa:01:33:64:0b: bb:ff:d0:e9:c5:49:56:57:b0:a5:4c:d5:fa:2a:44: fc:a8:c4:59:c3:33:2e:39:3c:fa:8c:43:bf:48:32: 6f:d3:2d:d3:94:c8:d4:fb:d7:87:68:b8:9e:46:8f: ac:b4:f0:6a:be:e6:6e:df:e5:f1:8a:0e:e9:0d:33: f3:29:1b:7d:c8:af:60:28:6d:ae:06:3f:b8:65:91: 0e:3b:d0:e3:e7:c7:92:77:66:dc:b9:9e:00:f9:c8: 4c:87:a6:fb:e7:68:0a:43:76:6c:bc:68:f4:7d:80: 3d:f2:3b:0e:5f:60:01:91:64:6b:da:43:35:fd:88: 43:ac:ff:60:b0:bb:5f:1d:8b:d7:37:39:01:bd:1f: 41:c2:1f:af:09:bf:c0:44:df:82:88:58:70:0e:56: 7b:ed:80:a2:b6:73:1d:5b:f3:81:07:13:3e:6c:42: 9e:55:46:7b:eb:cf:61:2d:78:b8:6f:86:53:7c:4b: 3b:05:50:50:2d:88:62:44:22:ab:21:79:d4:da:b1: 3b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D6:DD:26:01:86:DC:9B:4F:A6:50:41:02:3F:55:6D:49:CE:59:03 X509v3 Authority Key Identifier: keyid:06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:df:ab:20:30:74:a9:ae:08:53:23:dc:1a:e9:02:47:ae:cf: 41:57:45:01:11:37:1b:71:43:6e:9f:a6:0d:fb:de:90:08:52: 06:f7:a4:3a:34:dd:f9:8a:f8:e3:72:f3:96:a3:34:50:82:17: e3:26:3b:f3:1c:1c:82:dd:5b:d0:76:9e:ec:53:7b:9f:53:fb: 9d:aa:cf:0c:fc:2f:28:7d:62:10:91:57:92:f2:d1:fc:b2:ad: 2b:67:b3:82:e3:b6:48:88:b5:ce:97:0b:cf:b8:bc:0a:c5:c8: 86:42:34:98:62:3d:4f:41:80:b2:04:d3:a7:6f:a8:c0:a8:51: ad:ea:bd:1f:2c:57:9d:c6:15:a3:e2:ae:83:e0:44:b1:26:5b: 94:39:af:7d:dd:df:2d:97:a1:45:4f:2c:17:54:23:cc:1a:18: c0:d2:a5:9f:a4:97:43:d0:7f:5a:18:dc:4a:a6:e6:ab:35:b3: 13:1f:b2:a0:ee:4f:eb:7f:17:2a:a7:73:e6:50:62:e5:c1:6d: 26:19:bd:db:4b:fe:8b:c5:f3:e1:d0:22:77:20:ad:0b:f7:71: 97:ac:a2:5d:f7:a4:df:c7:60:9e:e4:f8:a9:42:e1:73:f9:4e: 30:5f:05:d9:98:6c:f2:04:c6:3f:a2:1e:84:f4:00:f4:e3:92: 5a:e6:08:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUESScvqwLf+sRZ/T6QLbT1wCCxhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYwODMwMzVCNDAxMENFQzMzN0VFMjZGNUVBMTVBMDRE RDIwOTIxOTAeFw0yNjA5MjEyMTE4MDZaFw0yNjA5MjIyMzAxMDZaMDMxMTAvBgNV BAMTKDhFRDZERDI2MDE4NkRDOUI0RkE2NTA0MTAyM0Y1NTZENDlDRTU5MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc53zAa3IwC0osbNMMRQR6TqIi OnLd+UBxduhT83UlIwwkXJ+Um75LFk/hHu3ffGaxheDymLWqATNkC7v/0OnFSVZX sKVM1foqRPyoxFnDMy45PPqMQ79IMm/TLdOUyNT714douJ5Gj6y08Gq+5m7f5fGK DukNM/MpG33Ir2Aoba4GP7hlkQ470OPnx5J3Zty5ngD5yEyHpvvnaApDdmy8aPR9 gD3yOw5fYAGRZGvaQzX9iEOs/2Cwu18di9c3OQG9H0HCH68Jv8BE34KIWHAOVnvt gKK2cx1b84EHEz5sQp5VRnvrz2EteLhvhlN8SzsFUFAtiGJEIqshedTasTuBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjtbdJgGG3JtPplBBAj9VbUnOWQMwHwYDVR0j BBgwFoAUBggwNbQBDOwzfuJvXqFaBN0gkhkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQ4MzMwNzQtMzMwZS00YWFhLThjMDAtMDQwODkwYTcxYTExLzAvMDYwODMwMzVC NDAxMENFQzMzN0VFMjZGNUVBMTVBMDRERDIwOTIxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNjA4MzAzNUI0MDEwQ0VDMzM3RUUyNkY1RUExNUEwNEREMjA5 MjE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQ4MzMwNzQtMzMwZS00YWFhLThj MDAtMDQwODkwYTcxYTExLzAvMDYwODMwMzVCNDAxMENFQzMzN0VFMjZGNUVBMTVB MDRERDIwOTIxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjfqyAwdKmuCFMj3BrpAkeuz0FXRQERNxtx Q26fpg373pAIUgb3pDo03fmK+ONy85ajNFCCF+MmO/McHILdW9B2nuxTe59T+52q zwz8Lyh9YhCRV5Ly0fyyrStns4LjtkiItc6XC8+4vArFyIZCNJhiPU9BgLIE06dv qMCoUa3qvR8sV53GFaPiroPgRLEmW5Q5r33d3y2XoUVPLBdUI8waGMDSpZ+kl0PQ f1oY3Eqm5qs1sxMfsqDuT+t/Fyqnc+ZQYuXBbSYZvdtL/ovF8+HQIncgrQv3cZes ol33pN/HYJ7k+KlC4XP5TjBfBdmYbPIExj+iHoT0APTjklrmCJ8= -----END CERTIFICATE-----Generated at Tue Sep 22 09:10:27 2026 by rpki-client